SAP Privileges App in Self Service

[adumonjic]

Does anyone use the Privileges app provided by SAP in Self Service? If so, is it possible to grant admin credentials via a policy for a specific time to update just apps that are already installed on the machine? Basically we don't want users to install foreign apps without admin credentials, but we would like to grant them admin credentials to update their current ones.

https://github.com/SAP/macOS-enterprise-privileges/releases

Thank you.

[rtrouton · Accepted solution]

For the specific identified use case (Privileges enabling only the update of apps), no.

Privileges does the following:

• Allows the logged-in user to get admin rights if they don't have them.
• Takes away admin rights from the logged-in user

What the user does with the admin rights while they have them is not something Privileges is set up to manage.

[adumonjic]

Understood. Is it possible to narrow it via JAMF though?